@cosmicdrift/kumiko-bundled-features 0.368.0 → 0.370.0

package/dist/inbound-provider-inmemory/index.d.ts

@@ -1 +1 @@
-export { createInboundProviderInMemoryFeature, emitWatchError, failNextFetchWith, failNextVerifyWith, INMEMORY_PROVIDER_KEY, inboundProviderInMemoryFeature, isWatching, resetInboundInMemory, seedInboundMessage, } from "./feature.js";
+export { createInboundProviderInMemoryFeature, emitWatchError, failNextFetchWith, failNextVerifyWith, INMEMORY_PROVIDER_KEY, isWatching, resetInboundInMemory, seedInboundMessage, } from "./feature.ts";

package/dist/inbound-provider-inmemory/index.js

@@ -1,2 +1,2 @@
 // Public API of the inbound-provider-inmemory bundled-feature.
-export { createInboundProviderInMemoryFeature, emitWatchError, failNextFetchWith, failNextVerifyWith, INMEMORY_PROVIDER_KEY, inboundProviderInMemoryFeature, isWatching, resetInboundInMemory, seedInboundMessage, } from "./feature.js";
+export { createInboundProviderInMemoryFeature, emitWatchError, failNextFetchWith, failNextVerifyWith, INMEMORY_PROVIDER_KEY, isWatching, resetInboundInMemory, seedInboundMessage, } from "./feature.js";

package/dist/jobs/handlers/tenant-runs.query.d.ts

@@ -1,5 +1,5 @@
 import * as z from "zod";
-import { type TenantJobRunStatus } from "../tenant-job-run-table.js";
+import { type TenantJobRunStatus } from "../tenant-job-run-table.ts";
 export declare const tenantRunsQuery: import("@cosmicdrift/kumiko-types/define-handler").QueryHandlerDefinition<"tenant-runs", z.ZodObject<{
     jobName: z.ZodOptional<z.ZodString>;
     subject: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnion<readonly [z.ZodString, z.ZodNumber, z.ZodBoolean]>>>;

package/dist/jobs/index.d.ts

@@ -1,9 +1,9 @@
-export { JOBS_FEATURE, JobErrors, JobHandlers, JobQueries } from "./constants.js";
-export { createJobsFeature, type JobsFeatureOptions } from "./feature.js";
-export type { JobRunLoggerCallbacks } from "./job-run-logger.js";
-export { createJobRunLogger } from "./job-run-logger.js";
-export type { JobLogLevel, JobRunStatus } from "./job-run-table.js";
-export { jobRunLogsTable, jobRunsTable } from "./job-run-table.js";
-export { tenantJobFailuresTable } from "./tenant-job-failure-table.js";
-export type { TenantJobRunStatus } from "./tenant-job-run-table.js";
-export { tenantJobRunsTable } from "./tenant-job-run-table.js";
+export { JOBS_FEATURE, JobErrors, JobHandlers, JobQueries } from "./constants.ts";
+export { createJobsFeature, type JobsFeatureOptions } from "./feature.ts";
+export type { JobRunLoggerCallbacks } from "./job-run-logger.ts";
+export { createJobRunLogger } from "./job-run-logger.ts";
+export type { JobLogLevel, JobRunStatus } from "./job-run-table.ts";
+export { jobRunLogsTable, jobRunsTable } from "./job-run-table.ts";
+export { tenantJobFailuresTable } from "./tenant-job-failure-table.ts";
+export type { TenantJobRunStatus } from "./tenant-job-run-table.ts";
+export { tenantJobRunsTable } from "./tenant-job-run-table.ts";

package/dist/jobs/web/index.d.ts

@@ -1 +1 @@
-export { type JobsClientOptions, jobsClient } from "./client-plugin.js";
+export { type JobsClientOptions, jobsClient } from "./client-plugin.tsx";

package/dist/ledger/feature.d.ts

@@ -16,8 +16,4 @@ export type LedgerFeatureOptions = {
     readonly toggleable?: LedgerToggleable;
 };
 export declare function createLedgerFeature(opts?: LedgerFeatureOptions): typeof defaultLedgerFeature;
-/** @deprecated Use createLedgerFeature(). Run `bun kumiko-upgrade --apply`. Removed in the first release after 2026-10-29. */
-export declare const ledgerFeature: import("@cosmicdrift/kumiko-types/feature").FeatureDefinition & {
-    readonly exports: void;
-};
 export {};

package/dist/ledger/feature.js

@@ -107,5 +107,3 @@ export function createLedgerFeature(opts = {}) {
     const access = resolveAccess(opts);
     return defineFeature(LEDGER_FEATURE_NAME, (r) => registerLedger(r, access, opts.toggleable));
 }
-/** @deprecated Use createLedgerFeature(). Run `bun kumiko-upgrade --apply`. Removed in the first release after 2026-10-29. */
-export const ledgerFeature = createLedgerFeature();

package/dist/ledger/index.d.ts

@@ -1,10 +1,10 @@
-export { ACCOUNT_TYPES, type AccountType, DEFAULT_LEDGER_ACCESS, DEFAULT_LEDGER_ROLES, LEDGER_FEATURE_NAME, LedgerHandlers, LedgerQueries, SCHEDULE_INTERVALS, type ScheduleInterval, TRANSACTION_STATUS, type TransactionStatus, } from "./constants.js";
-export { accountEntity, scheduleEntity, transactionEntity } from "./entity.js";
-export { createLedgerFeature, type LedgerFeatureOptions, ledgerFeature, } from "./feature.js";
-export { confirmSchedulePeriodHandler, createConfirmSchedulePeriodHandler, } from "./handlers/confirm-schedule-period.write.js";
-export { createCreateTransactionHandler, createTransactionHandler, } from "./handlers/create-transaction.write.js";
-export { createBalanceSheetHandler, createBalancesReportHandler, createIncomeStatementHandler, } from "./handlers/reports.query.js";
-export { createReverseTransactionHandler, reverseTransactionHandler, } from "./handlers/reverse-transaction.write.js";
-export { findReversedIds, type LedgerTxRow, mergeScheduleActuals, type ProjectedPeriod, projectSchedule, type ScheduleDef, type ScheduleMonth, type ScheduleMonthStatus, scheduleReference, } from "./recurring.js";
-export { type AccountBalance, accountBalances, type BalanceSheet, type BalancesReport, balanceSheet, type IncomeStatement, incomeStatement, type LedgerAccount, type LedgerEntry, type Period, rawBalances, } from "./reports.js";
-export { accountTypeSchema, type ConfirmSchedulePeriodPayload, type CreateTransactionPayload, confirmSchedulePeriodPayloadSchema, createTransactionPayloadSchema, type Posting, postingSchema, type ReverseTransactionPayload, reverseTransactionPayloadSchema, } from "./schemas.js";
+export { ACCOUNT_TYPES, type AccountType, DEFAULT_LEDGER_ACCESS, DEFAULT_LEDGER_ROLES, LEDGER_FEATURE_NAME, LedgerHandlers, LedgerQueries, SCHEDULE_INTERVALS, type ScheduleInterval, TRANSACTION_STATUS, type TransactionStatus, } from "./constants.ts";
+export { accountEntity, scheduleEntity, transactionEntity } from "./entity.ts";
+export { createLedgerFeature, type LedgerFeatureOptions, } from "./feature.ts";
+export { confirmSchedulePeriodHandler, createConfirmSchedulePeriodHandler, } from "./handlers/confirm-schedule-period.write.ts";
+export { createCreateTransactionHandler, createTransactionHandler, } from "./handlers/create-transaction.write.ts";
+export { createBalanceSheetHandler, createBalancesReportHandler, createIncomeStatementHandler, } from "./handlers/reports.query.ts";
+export { createReverseTransactionHandler, reverseTransactionHandler, } from "./handlers/reverse-transaction.write.ts";
+export { findReversedIds, type LedgerTxRow, mergeScheduleActuals, type ProjectedPeriod, projectSchedule, type ScheduleDef, type ScheduleMonth, type ScheduleMonthStatus, scheduleReference, } from "./recurring.ts";
+export { type AccountBalance, accountBalances, type BalanceSheet, type BalancesReport, balanceSheet, type IncomeStatement, incomeStatement, type LedgerAccount, type LedgerEntry, type Period, rawBalances, } from "./reports.ts";
+export { accountTypeSchema, type ConfirmSchedulePeriodPayload, type CreateTransactionPayload, confirmSchedulePeriodPayloadSchema, createTransactionPayloadSchema, type Posting, postingSchema, type ReverseTransactionPayload, reverseTransactionPayloadSchema, } from "./schemas.ts";

package/dist/ledger/index.js

@@ -1,6 +1,6 @@
 export { ACCOUNT_TYPES, DEFAULT_LEDGER_ACCESS, DEFAULT_LEDGER_ROLES, LEDGER_FEATURE_NAME, LedgerHandlers, LedgerQueries, SCHEDULE_INTERVALS, TRANSACTION_STATUS, } from "./constants.js";
 export { accountEntity, scheduleEntity, transactionEntity } from "./entity.js";
-export { createLedgerFeature, ledgerFeature, } from "./feature.js";
+export { createLedgerFeature, } from "./feature.js";
 export { confirmSchedulePeriodHandler, createConfirmSchedulePeriodHandler, } from "./handlers/confirm-schedule-period.write.js";
 export { createCreateTransactionHandler, createTransactionHandler, } from "./handlers/create-transaction.write.js";
 export { createBalanceSheetHandler, createBalancesReportHandler, createIncomeStatementHandler, } from "./handlers/reports.query.js";

package/dist/ledger/recurring.d.ts

@@ -1,5 +1,5 @@
-import type { ScheduleInterval } from "./constants.js";
-import type { Posting } from "./schemas.js";
+import type { ScheduleInterval } from "./constants.ts";
+import type { Posting } from "./schemas.ts";
 export type ScheduleDef = {
     readonly startDate: string;
     readonly endDate?: string | null;

package/dist/ledger/reports.d.ts

@@ -1,5 +1,5 @@
-import type { AccountType } from "./constants.js";
-import type { Posting } from "./schemas.js";
+import type { AccountType } from "./constants.ts";
+import type { Posting } from "./schemas.ts";
 export type LedgerAccount = {
     readonly id: string;
     readonly name: string;

package/dist/ledger/web/index.d.ts

@@ -1,3 +1,3 @@
-export { ACCOUNT_TYPES, type AccountType, LEDGER_FEATURE_NAME, LedgerHandlers, LedgerQueries, SCHEDULE_INTERVALS, type ScheduleInterval, TRANSACTION_STATUS, type TransactionStatus, } from "../constants.js";
-export { type LedgerTxRow, mergeScheduleActuals, type ProjectedPeriod, projectSchedule, type ScheduleDef, type ScheduleMonth, type ScheduleMonthStatus, scheduleReference, } from "../recurring.js";
-export { type ConfirmSchedulePeriodPayload, confirmSchedulePeriodPayloadSchema, type Posting, postingSchema, } from "../schemas.js";
+export { ACCOUNT_TYPES, type AccountType, LEDGER_FEATURE_NAME, LedgerHandlers, LedgerQueries, SCHEDULE_INTERVALS, type ScheduleInterval, TRANSACTION_STATUS, type TransactionStatus, } from "../constants.ts";
+export { type LedgerTxRow, mergeScheduleActuals, type ProjectedPeriod, projectSchedule, type ScheduleDef, type ScheduleMonth, type ScheduleMonthStatus, scheduleReference, } from "../recurring.ts";
+export { type ConfirmSchedulePeriodPayload, confirmSchedulePeriodPayloadSchema, type Posting, postingSchema, } from "../schemas.ts";

package/dist/legal-pages/constants.d.ts

@@ -46,6 +46,18 @@ export declare const LEGAL_ROUTES: readonly [{
     readonly lang: "en";
     readonly titleFallback: "Privacy Policy";
 }];
+export declare const LEGAL_TERMS_ROUTES: readonly [{
+    readonly path: "/legal/nutzungsbedingungen";
+    readonly slug: "terms";
+    readonly lang: "de";
+    readonly titleFallback: "Nutzungsbedingungen";
+}, {
+    readonly path: "/legal/terms";
+    readonly slug: "terms";
+    readonly lang: "en";
+    readonly titleFallback: "Terms of Service";
+}];
+export declare function legalPagePath(routes: readonly LegalPageRoute[], slug: string, lang: string): string | undefined;
 export declare const LegalPagesErrors: {
     readonly bootMissingBlock: "legal_pages_boot_missing_block";
 };

package/dist/legal-pages/constants.js

@@ -28,6 +28,22 @@ export const LEGAL_ROUTES = [
     { path: "/legal/imprint", slug: "imprint", lang: "en", titleFallback: "Imprint" },
     { path: "/legal/privacy", slug: "privacy", lang: "en", titleFallback: "Privacy Policy" },
 ];
+// Terms of service are opt-in (`terms: true`) and never boot-required: not every
+// app needs them, and DACH law does not mandate them the way it does imprint.
+export const LEGAL_TERMS_ROUTES = [
+    {
+        path: "/legal/nutzungsbedingungen",
+        slug: "terms",
+        lang: "de",
+        titleFallback: "Nutzungsbedingungen",
+    },
+    { path: "/legal/terms", slug: "terms", lang: "en", titleFallback: "Terms of Service" },
+];
+// Client-safe path lookup so apps that render their own legal pages (e.g. a
+// static marketing site) link to the same paths the feature serves.
+export function legalPagePath(routes, slug, lang) {
+    return routes.find((route) => route.slug === slug && route.lang === lang)?.path;
+}
 export const LegalPagesErrors = {
     bootMissingBlock: "legal_pages_boot_missing_block",
 };

package/dist/legal-pages/feature.d.ts

@@ -1,7 +1,7 @@
 import { type FeatureDefinition } from "@cosmicdrift/kumiko-framework/engine";
-import { type PublicPageWrapLayout } from "../page-render/index.js";
-import { type LegalPageRoute, type LegalRequiredBlock } from "./constants.js";
-export { type LegalPagesBootCheckCtx, runLegalPagesBootCheck } from "./lib/boot-check.js";
+import { type PublicPageWrapLayout } from "../page-render/index.ts";
+import { type LegalPageRoute, type LegalRequiredBlock } from "./constants.ts";
+export { type LegalPagesBootCheckCtx, runLegalPagesBootCheck } from "./lib/boot-check.ts";
 export type LegalPagesWrapLayout = PublicPageWrapLayout;
 export type LegalPagesOptions = {
     /** Custom Layout-Wrapper für die /legal/*-Routes. Default: minimaler
@@ -21,5 +21,8 @@ export type LegalPagesOptions = {
      *  `privacy/de`). Apps whose routes use a different slug/lang set
      *  (e.g. Spanish-default) pass their own list here. */
     readonly requiredBlocks?: readonly LegalRequiredBlock[];
+    /** Also serve LEGAL_TERMS_ROUTES (`/legal/nutzungsbedingungen`,
+     *  `/legal/terms`, slug `terms`). Appended to `routes`; never boot-required. */
+    readonly terms?: boolean;
 };
 export declare function createLegalPagesFeature(opts?: LegalPagesOptions): FeatureDefinition;

package/dist/legal-pages/feature.js

@@ -2,7 +2,7 @@ import { computeRevisionEtag, etagMatches } from "@cosmicdrift/kumiko-framework/
 import { defineFeature, SYSTEM_TENANT_ID, } from "@cosmicdrift/kumiko-framework/engine";
 import { escapeHtml } from "@cosmicdrift/kumiko-headless";
 import { cachedSecurePageResponse, redirectToCanonicalPath, slashVariantOf, } from "../page-render/index.js";
-import { LEGAL_REQUIRED_BLOCKS, LEGAL_ROUTES, } from "./constants.js";
+import { LEGAL_REQUIRED_BLOCKS, LEGAL_ROUTES, LEGAL_TERMS_ROUTES, } from "./constants.js";
 import { runLegalPagesBootCheck } from "./lib/boot-check.js";
 import { validateRoutes } from "./lib/validate-routes.js";
 import { renderMarkdownToHtml, wrapInLayout } from "./markdown.js";
@@ -19,7 +19,10 @@ const TEXT_BLOCK_BY_SLUG_QN = "template-resolver:query:by-slug";
 const PUBLIC_PAGE_CACHE = { kind: "revalidate", maxAgeSeconds: 60 };
 export function createLegalPagesFeature(opts = {}) {
     const wrapLayout = opts.wrapLayout ?? wrapInLayout;
-    const routes = opts.routes ?? LEGAL_ROUTES;
+    const routes = [
+        ...(opts.routes ?? LEGAL_ROUTES),
+        ...(opts.terms === true ? LEGAL_TERMS_ROUTES : []),
+    ];
     const requiredBlocks = opts.requiredBlocks ?? LEGAL_REQUIRED_BLOCKS;
     validateRoutes(routes);
     if (opts.routes !== undefined && opts.routes.length > 0 && opts.requiredBlocks === undefined) {

package/dist/legal-pages/index.d.ts

@@ -1,3 +1,5 @@
-export { LEGAL_OPTIONAL_BLOCKS, LEGAL_PAGES_FEATURE, LEGAL_REQUIRED_BLOCKS, LEGAL_ROUTES, type LegalPageRoute, LegalPagesErrors, type LegalRequiredBlock, } from "./constants.js";
-export { createLegalPagesFeature, type LegalPagesBootCheckCtx, type LegalPagesOptions, runLegalPagesBootCheck, } from "./feature.js";
-export { renderMarkdownToHtml, wrapInLayout } from "./markdown.js";
+export { LEGAL_OPTIONAL_BLOCKS, LEGAL_PAGES_FEATURE, LEGAL_REQUIRED_BLOCKS, LEGAL_ROUTES, LEGAL_TERMS_ROUTES, type LegalPageRoute, LegalPagesErrors, type LegalRequiredBlock, legalPagePath, } from "./constants.ts";
+export { createLegalPagesFeature, type LegalPagesBootCheckCtx, type LegalPagesOptions, runLegalPagesBootCheck, } from "./feature.ts";
+export { createLegalPagesLayout, type LegalPagesLayoutOptions } from "./layout.ts";
+export { renderMarkdownToHtml, wrapInLayout } from "./markdown.ts";
+export { type LegalContentBlock, type LegalContentSeedFn, type LegalContentSeedSource, legalContentSeed, } from "./seed.ts";

package/dist/legal-pages/index.js

@@ -1,3 +1,5 @@
-export { LEGAL_OPTIONAL_BLOCKS, LEGAL_PAGES_FEATURE, LEGAL_REQUIRED_BLOCKS, LEGAL_ROUTES, LegalPagesErrors, } from "./constants.js";
+export { LEGAL_OPTIONAL_BLOCKS, LEGAL_PAGES_FEATURE, LEGAL_REQUIRED_BLOCKS, LEGAL_ROUTES, LEGAL_TERMS_ROUTES, LegalPagesErrors, legalPagePath, } from "./constants.js";
 export { createLegalPagesFeature, runLegalPagesBootCheck, } from "./feature.js";
+export { createLegalPagesLayout } from "./layout.js";
 export { renderMarkdownToHtml, wrapInLayout } from "./markdown.js";
+export { legalContentSeed, } from "./seed.js";

package/dist/legal-pages/layout.d.ts

@@ -0,0 +1,10 @@
+import { type PublicPageWrapLayout } from "../page-render/index.ts";
+export type LegalPagesLayoutOptions = {
+    readonly siteName: string;
+    readonly css?: string;
+    readonly stylesheetHrefs?: readonly string[];
+    readonly headerHtml?: (lang: string) => string;
+    readonly footerHtml?: (lang: string) => string;
+    readonly contentClass?: string;
+};
+export declare function createLegalPagesLayout(options: LegalPagesLayoutOptions): PublicPageWrapLayout;

package/dist/legal-pages/layout.js

@@ -0,0 +1,32 @@
+import { escapeHtml, escapeHtmlAttr } from "@cosmicdrift/kumiko-headless";
+import { TENANT_CONTENT_ATTR } from "../page-render/index.js";
+export function createLegalPagesLayout(options) {
+    const stylesheets = (options.stylesheetHrefs ?? [])
+        .map((href) => `\n<link rel="stylesheet" href="${escapeHtmlAttr(href)}">`)
+        .join("");
+    // html-ok: css comes from app code (LegalPagesLayoutOptions), never from tenant or user input.
+    const style = options.css ? `\n<style>${options.css}</style>` : "";
+    const contentClass = options.contentClass
+        ? ` class="${escapeHtmlAttr(options.contentClass)}"`
+        : "";
+    return ({ title, bodyHtml, lang }) => {
+        const headerHtml = options.headerHtml?.(lang) ?? "";
+        const footerHtml = options.footerHtml?.(lang) ?? "";
+        return `<!doctype html>
+<html lang="${escapeHtmlAttr(lang)}">
+<head>
+<meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
+<title>${escapeHtml(title)} · ${escapeHtml(options.siteName)}</title>
+<meta name="robots" content="index,follow">${stylesheets}${style}
+</head>
+<body>
+${headerHtml}
+<main ${TENANT_CONTENT_ATTR}${contentClass}>
+${bodyHtml}
+</main>
+${footerHtml}
+</body>
+</html>`;
+    };
+}

package/dist/legal-pages/lib/boot-check.d.ts

@@ -1,5 +1,5 @@
 import { type TemplateResolverApi } from "@cosmicdrift/kumiko-bundled-features/template-resolver";
-import { type LegalRequiredBlock } from "../constants.js";
+import { type LegalRequiredBlock } from "../constants.ts";
 export type LegalPagesBootCheckCtx = {
     readonly templateResolver?: TemplateResolverApi;
     readonly log?: {

package/dist/legal-pages/lib/validate-routes.d.ts

@@ -1,2 +1,2 @@
-import type { LegalPageRoute } from "../constants.js";
+import type { LegalPageRoute } from "../constants.ts";
 export declare function validateRoutes(routes: readonly LegalPageRoute[]): void;

package/dist/legal-pages/markdown.d.ts

@@ -1,2 +1,2 @@
-export { wrapInLayout } from "../page-render/layout.js";
-export { renderSafeMarkdown as renderMarkdownToHtml } from "../page-render/markdown.js";
+export { wrapInLayout } from "../page-render/layout.ts";
+export { renderSafeMarkdown as renderMarkdownToHtml } from "../page-render/markdown.ts";

package/dist/legal-pages/seed.d.ts

@@ -0,0 +1,12 @@
+import { type LegalContentBlock } from "@cosmicdrift/kumiko-bundled-features/template-resolver/seeding";
+import type { DbConnection } from "@cosmicdrift/kumiko-framework/db";
+export type { LegalContentBlock };
+export type LegalContentSeedSource = {
+    readonly blocks: readonly LegalContentBlock[];
+} | {
+    readonly path: string;
+};
+export type LegalContentSeedFn = (deps: {
+    readonly db: DbConnection;
+}) => Promise<void>;
+export declare function legalContentSeed(source: LegalContentSeedSource): LegalContentSeedFn;

package/dist/legal-pages/seed.js

@@ -0,0 +1,38 @@
+var __rewriteRelativeImportExtension = (this && this.__rewriteRelativeImportExtension) || function (path, preserveJsx) {
+    if (typeof path === "string" && /^\.\.?\//.test(path)) {
+        return path.replace(/\.(tsx)$|((?:\.d)?)((?:\.[^./]+?)?)\.([cm]?)ts$/i, function (m, tsx, d, ext, cm) {
+            return tsx ? preserveJsx ? ".jsx" : ".js" : d && (!ext || !cm) ? m : (d + ext + "." + cm.toLowerCase() + "js");
+        });
+    }
+    return path;
+};
+import { resolve } from "node:path";
+import { pathToFileURL } from "node:url";
+import { seedLegalContentFromJson, } from "@cosmicdrift/kumiko-bundled-features/template-resolver/seeding";
+import * as z from "zod";
+const legalContentBlocksSchema = z.array(z.object({
+    slug: z.string().min(1),
+    locale: z.string().min(1),
+    title: z.string(),
+    content: z.string(),
+}));
+const jsonModuleSchema = z.object({ default: z.unknown() });
+async function loadBlocksFromJson(path) {
+    const url = pathToFileURL(resolve(process.cwd(), path)).href;
+    const module = jsonModuleSchema.parse(await import(__rewriteRelativeImportExtension(url), { with: { type: "json" } }));
+    const parsed = legalContentBlocksSchema.safeParse(module.default);
+    if (!parsed.success) {
+        throw new Error(`legal-pages: ${path} is not a list of { slug, locale, title, content } blocks: ${parsed.error.message}`);
+    }
+    return parsed.data;
+}
+// Boot seed for runProdApp's `seeds: [...]`. The JSON template is authoritative
+// (ifExists "update"), so legally required text changes reach rows seeded once.
+export function legalContentSeed(source) {
+    return async ({ db }) => {
+        const blocks = "blocks" in source
+            ? legalContentBlocksSchema.parse(source.blocks)
+            : await loadBlocksFromJson(source.path);
+        await seedLegalContentFromJson(db, blocks);
+    };
+}

package/dist/legal-pages/web/index.d.ts

@@ -1 +1 @@
-export { legalPagesClient } from "./client-plugin.js";
+export { legalPagesClient } from "./client-plugin.ts";

package/dist/mail-foundation/feature.d.ts

@@ -46,6 +46,10 @@ export type MailTransportContext = {
  */
 export type MailTransportPlugin = {
     readonly build: (ctx: MailTransportContext, tenantId: string) => Promise<EmailTransport>;
+    /** `false` keeps the provider out of the generated settings: it can still be set by a
+     *  seed or config write, but a tenant admin is never offered it (e.g. a test inbox
+     *  that swallows every mail). */
+    readonly selectableInSettings?: false;
 };
 export declare function isMailTransportPlugin(o: unknown): o is MailTransportPlugin;
 declare module "@cosmicdrift/kumiko-framework/engine" {
@@ -59,13 +63,6 @@ export declare function createMailFoundationFeature(): import("@cosmicdrift/kumi
         providerConfigKey: import("@cosmicdrift/kumiko-types/config").ConfigKeyHandle<"text">;
     };
 };
-/** @deprecated Use createMailFoundationFeature(). Run `bun kumiko-upgrade --apply`. Removed in the first release after 2026-10-29. */
-export declare const mailFoundationFeature: import("@cosmicdrift/kumiko-types/feature").FeatureDefinition & {
-    readonly exports: {
-        /** Config-key-handle for the provider-selector. */
-        providerConfigKey: import("@cosmicdrift/kumiko-types/config").ConfigKeyHandle<"text">;
-    };
-};
 /**
  * Resolves the tenant's mail-transport. Reads the `provider` config-key,
  * looks up the matching plugin in the registry, calls its `build(ctx,

package/dist/mail-foundation/feature.js

@@ -33,6 +33,7 @@
 import { withPiiCiphertextGuard, } from "@cosmicdrift/kumiko-bundled-features/channel-email";
 import { requireDefined } from "@cosmicdrift/kumiko-bundled-features/foundation-shared";
 import { access, createSystemUser, createTenantConfig, defineFeature, } from "@cosmicdrift/kumiko-framework/engine";
+import { MAIL_FOUNDATION_I18N } from "./i18n.js";
 const FEATURE_NAME = "mail-foundation";
 // Extension-point name for transport-provider plugins (mail-transport-smtp,
 // mail-transport-brevo-api, ...).
@@ -47,7 +48,7 @@ export function isMailTransportPlugin(o) {
 // =============================================================================
 export function createMailFoundationFeature() {
     return defineFeature(FEATURE_NAME, (r) => {
-        r.describe("Defines the `mailTransport` extension point and a per-tenant `provider` config key that selects which registered transport plugin to use at runtime. Call `createTransportForTenant(ctx, tenantId)` to get an `EmailTransport` ready for sending \u2014 use this feature together with at least one `mail-transport-*` feature; use `delivery` + `channel-email` instead when you need the full notification pipeline with delivery attempts and user preferences. Pass `tenantMailTransport` as `tenantTransport` to `createChannelEmailFeature` so a tenant with a provider configured sends delivery mails through its own transport and other tenants through the app transport.");
+        r.describe("Defines the `mailTransport` extension point and a per-tenant `provider` config key that selects which registered transport plugin to use at runtime. Call `createTransportForTenant(ctx, tenantId)` to get an `EmailTransport` ready for sending \u2014 use this feature together with at least one `mail-transport-*` feature; use `delivery` + `channel-email` instead when you need the full notification pipeline with delivery attempts and user preferences. Pass `tenantMailTransport` as `tenantTransport` to `createChannelEmailFeature`: notifications declared with `tenantTransport: true` then go through the tenant's own transport when it has a provider and through the app transport otherwise. Tenant admins pick the provider and fill in its settings on the generated Email sending settings screen; an empty provider is a valid choice and means the platform sends.");
         r.uiHints({
             displayLabel: "Mail Transport Foundation",
             category: "notifications",
@@ -64,24 +65,27 @@ export function createMailFoundationFeature() {
                 // delivery's extendsRegistrar.
             },
         });
-        // Provider-selector. Default empty so the boot-validator throws if a
-        // tenant tries to send mail without first picking + setting up a
-        // provider — better than a silent fallback. The actual list of valid
-        // values lives in the registered plugins, not here — Designer-UI can
-        // render `getExtensionUsages("mailTransport").map(u => u.entityName)`
-        // as the option-list.
+        // Empty = this tenant has no own provider: tenantMailTransport yields null and
+        // channel-email uses the app transport, so empty is a valid choice a tenant can
+        // return to (reset in the settings mask) and readiness must not flag it.
+        // createTransportForTenant still throws on empty.
         const providerConfigKey = r.config("provider", createTenantConfig("text", {
             default: "",
-            // required: without a chosen provider createTransportForTenant throws —
-            // readiness used to report ready:true and the first mail send
-            // surfaced the UnconfiguredError (280/1).
-            required: true,
-            write: access.roles("TenantAdmin", "SystemAdmin"),
+            // No SystemAdmin: a platform-level provider would be inherited by every tenant,
+            // whose own credentials (tenant secrets) are missing, and break all their mail.
+            write: access.withSystem(access.roles("TenantAdmin")),
             read: access.roles("TenantAdmin", "SystemAdmin", "User"),
+            mask: {
+                title: "mail-foundation.provider",
+                description: "mail-foundation.provider.description",
+                icon: "mail",
+                order: 1,
+            },
         }));
         // Readiness gating: transport-plugins' required keys/secrets count only
         // while their plugin is the one this key selects.
         r.extensionSelector(MAIL_TRANSPORT_EXTENSION, providerConfigKey);
+        r.translations({ keys: MAIL_FOUNDATION_I18N });
         return {
             /** Config-key-handle for the provider-selector. */
             providerConfigKey,
@@ -90,8 +94,6 @@ export function createMailFoundationFeature() {
 }
 // The typed handles below come from one shared instance; each factory call builds its own handle objects.
 const sharedMailFoundationFeature = createMailFoundationFeature();
-/** @deprecated Use createMailFoundationFeature(). Run `bun kumiko-upgrade --apply`. Removed in the first release after 2026-10-29. */
-export const mailFoundationFeature = sharedMailFoundationFeature;
 // =============================================================================
 // Transport-factory — looks up the registered plugin + delegates
 // =============================================================================

package/dist/mail-foundation/i18n.d.ts

@@ -0,0 +1,14 @@
+export declare const MAIL_FOUNDATION_I18N: {
+    readonly "screen:mail-foundation-tenant.title": {
+        readonly en: "Email sending";
+    };
+    readonly "mail-foundation.settings": {
+        readonly en: "Email sending";
+    };
+    readonly "mail-foundation.provider": {
+        readonly en: "Own mail server";
+    };
+    readonly "mail-foundation.provider.description": {
+        readonly en: "Without one, the platform sends the mails. Reset the choice to go back to that.";
+    };
+};

package/dist/mail-foundation/i18n.js

@@ -0,0 +1,8 @@
+export const MAIL_FOUNDATION_I18N = {
+    "screen:mail-foundation-tenant.title": { en: "Email sending" },
+    "mail-foundation.settings": { en: "Email sending" },
+    "mail-foundation.provider": { en: "Own mail server" },
+    "mail-foundation.provider.description": {
+        en: "Without one, the platform sends the mails. Reset the choice to go back to that.",
+    },
+};

package/dist/mail-foundation/index.d.ts

@@ -1 +1 @@
-export { createMailFoundationFeature, createTransportForTenant, createTransportForTenantIfConfigured, isMailTransportPlugin, MAIL_TRANSPORT_EXTENSION, type MailTransportContext, type MailTransportPlugin, mailFoundationFeature, type TenantMailTransportScope, tenantMailTransport, } from "./feature.js";
+export { createMailFoundationFeature, createTransportForTenant, createTransportForTenantIfConfigured, isMailTransportPlugin, MAIL_TRANSPORT_EXTENSION, type MailTransportContext, type MailTransportPlugin, type TenantMailTransportScope, tenantMailTransport, } from "./feature.ts";

package/dist/mail-foundation/index.js

@@ -6,4 +6,4 @@
 //     up the registered transport-plugin, returns its EmailTransport
 //   - `MailTransportPlugin` — type that provider-features implement
 //     when registering via `r.useExtension("mailTransport", ...)`
-export { createMailFoundationFeature, createTransportForTenant, createTransportForTenantIfConfigured, isMailTransportPlugin, MAIL_TRANSPORT_EXTENSION, mailFoundationFeature, tenantMailTransport, } from "./feature.js";
+export { createMailFoundationFeature, createTransportForTenant, createTransportForTenantIfConfigured, isMailTransportPlugin, MAIL_TRANSPORT_EXTENSION, tenantMailTransport, } from "./feature.js";

package/dist/mail-transport-inmemory/feature.d.ts

@@ -12,7 +12,3 @@ export declare function clearInbox(tenantId: string): void;
 export declare function createMailTransportInMemoryFeature(): import("@cosmicdrift/kumiko-types/feature").FeatureDefinition & {
     readonly exports: void;
 };
-/** @deprecated Use createMailTransportInMemoryFeature(). Run `bun kumiko-upgrade --apply`. Removed in the first release after 2026-10-29. */
-export declare const mailTransportInMemoryFeature: import("@cosmicdrift/kumiko-types/feature").FeatureDefinition & {
-    readonly exports: void;
-};

package/dist/mail-transport-inmemory/feature.js

@@ -69,6 +69,9 @@ export function createMailTransportInMemoryFeature() {
         // extension-point "mailTransport" definiert.
         r.requires({ features: ["mail-foundation"] });
         const plugin = {
+            // Solon and studio mount it next to smtp in production; offering it there would
+            // let a tenant admin route every mail into process memory.
+            selectableInSettings: false,
             build: async (_ctx, tenantId) => {
                 // Returns the per-tenant buffer. Identity-stable across calls so the
                 // demo inbox keeps accumulating.
@@ -76,7 +79,8 @@ export function createMailTransportInMemoryFeature() {
             }, // @wrapper-known semantic-alias
         };
         r.useExtension(MAIL_TRANSPORT_EXTENSION, "inmemory", plugin);
+        r.translations({
+            keys: { "mail-transport-inmemory.settings": { en: "Test inbox (in memory)" } },
+        });
     }, { dedupeOptions: {} });
 }
-/** @deprecated Use createMailTransportInMemoryFeature(). Run `bun kumiko-upgrade --apply`. Removed in the first release after 2026-10-29. */
-export const mailTransportInMemoryFeature = createMailTransportInMemoryFeature();

package/dist/mail-transport-inmemory/index.d.ts

@@ -1 +1 @@
-export { clearInbox, createMailTransportInMemoryFeature, getInbox, mailTransportInMemoryFeature, } from "./feature.js";
+export { clearInbox, createMailTransportInMemoryFeature, getInbox, } from "./feature.ts";

package/dist/mail-transport-inmemory/index.js

@@ -1,2 +1,2 @@
 // Public API of the mail-transport-inmemory bundled-feature.
-export { clearInbox, createMailTransportInMemoryFeature, getInbox, mailTransportInMemoryFeature, } from "./feature.js";
+export { clearInbox, createMailTransportInMemoryFeature, getInbox, } from "./feature.js";

package/dist/mail-transport-smtp/config-keys.d.ts

@@ -0,0 +1,7 @@
+export declare const SMTP_CONFIG_KEYS: {
+    host: import("@cosmicdrift/kumiko-types/config").ConfigKeyDefinition<"text">;
+    port: import("@cosmicdrift/kumiko-types/config").ConfigKeyDefinition<"number">;
+    secure: import("@cosmicdrift/kumiko-types/config").ConfigKeyDefinition<"boolean">;
+    authUser: import("@cosmicdrift/kumiko-types/config").ConfigKeyDefinition<"text">;
+    from: import("@cosmicdrift/kumiko-types/config").ConfigKeyDefinition<"text">;
+};

package/dist/mail-transport-smtp/config-keys.js

@@ -0,0 +1,65 @@
+import { access, createTenantConfig } from "@cosmicdrift/kumiko-framework/engine";
+// No SystemAdmin write: the password is a tenant secret, so platform-level SMTP keys
+// could never form a working transport (see mail-foundation's provider key).
+const tenantAdminWrite = access.withSystem(access.roles("TenantAdmin"));
+const tenantAdminRead = access.roles("TenantAdmin", "SystemAdmin");
+// required: true ↔ the requireNonEmpty calls in buildSmtpTransport — keep in sync.
+export const SMTP_CONFIG_KEYS = {
+    host: createTenantConfig("text", {
+        required: true,
+        default: "",
+        write: tenantAdminWrite,
+        read: tenantAdminRead,
+        mask: {
+            title: "mail-transport-smtp.host",
+            description: "mail-transport-smtp.host.description",
+            icon: "server",
+            order: 1,
+        },
+    }),
+    port: createTenantConfig("number", {
+        default: 587,
+        bounds: { min: 1, max: 65535 },
+        write: tenantAdminWrite,
+        mask: {
+            title: "mail-transport-smtp.port",
+            description: "mail-transport-smtp.port.description",
+            icon: "hash",
+            order: 2,
+        },
+    }),
+    secure: createTenantConfig("boolean", {
+        default: false,
+        write: tenantAdminWrite,
+        mask: {
+            title: "mail-transport-smtp.secure",
+            description: "mail-transport-smtp.secure.description",
+            icon: "lock",
+            order: 3,
+        },
+    }),
+    authUser: createTenantConfig("text", {
+        required: true,
+        default: "",
+        write: tenantAdminWrite,
+        read: tenantAdminRead,
+        mask: {
+            title: "mail-transport-smtp.authUser",
+            description: "mail-transport-smtp.authUser.description",
+            icon: "user",
+            order: 4,
+        },
+    }),
+    from: createTenantConfig("text", {
+        required: true,
+        default: "",
+        write: tenantAdminWrite,
+        read: tenantAdminRead,
+        mask: {
+            title: "mail-transport-smtp.from",
+            description: "mail-transport-smtp.from.description",
+            icon: "mail",
+            order: 5,
+        },
+    }),
+};